Privacy policy

Version 2 · Prepared November 4, 2026 · Proposed effective date pending operator approval.

Information you provide

Profile names, biographies and chosen profile pictures are intended to be visible to other signed-in users. Do not include private contact details or sensitive information in your public profile.

Storage and service providers

The app sends account-related business records over HTTPS to its configured service at cuepop.cuepop.top. Chosen profile images are uploaded to Cloudflare R2. The returned image address is publicly readable by anyone who has the address; it is not private message storage.

Device storage and payments

Session values use platform secure storage. Language preferences are stored on this device. Apple handles payment details in its payment sheet. The app may retain product and transaction identifiers to reconcile purchased coin delivery; it does not collect payment-card numbers.

Safety submissions

Reports, appeals and blocked-user records can contain account identifiers, reasons and content references. These records support your safety actions. Avoid including information unrelated to a report.

Your choices

You can edit your profile and manage blocked users. Signing out removes this device’s session; it does not erase your account or revoke sessions on other devices. Account cleanup and its limitations are described below; it does not constitute complete server erasure.

Retention and requests

Replacing a profile image or removing its link does not itself erase the stored image. This draft does not establish a storage retention period. A verified operator contact channel is required for privacy and retention requests before this notice can be published.

Audience

Cuepop is intended for adults aged 18 and over. Do not create or share content identifying a child.

Local text conversations

Text entries and conversation summaries are saved separately for each account in ordinary device preferences. They are not encrypted by the app, uploaded, sent to the person shown, or synchronized between devices. Public profiles are used only to choose a conversation label. Local conversation deletion removes this device's copy; device backups and copies on other devices are outside this operation.

Account cleanup limits

Account → Delete account data requires exact DELETE confirmation and a final dialog. The app replaces its private account record with a credential-free deletion marker, soft-deletes owned business records and removes local conversations on this device. The marker prevents ordinary app login and registration for the same normalized account. Signed-in devices check account status on resume and every 60 seconds while active, subject to connectivity. This is not immediate remote session revocation.

Public room topic rounds

Room topics and submitted text responses are stored on cuepop.cuepop.top and can be read by signed-in users of this app. They are public content, not private messages. Responses include your account identifier and submission time and appear with your public profile. While a room is open, the app periodically refreshes its content. You can remove your own response; account cleanup also soft-deletes your owned room responses. Starting another topic does not delete earlier response records. Do not submit sensitive information. Topic rounds do not record audio or provide live voice calls.

Room microphone

The room microphone switch is off by default. If you choose to enable it and grant system permission, the app captures microphone audio only on this device. It does not record, play back, upload or send that audio to other members. Turning the switch off, leaving the room, opening another screen or moving the app into the background releases the microphone. Resuming does not automatically enable it.

Public room chat

Messages sent in room chat are stored on cuepop.cuepop.top with the author account identifier, profile name and avatar snapshot, room identifier and submission time. They are public records readable by signed-in app users, not private messages. The app shows the latest 60 messages and refreshes every 15 seconds while the room is open in the foreground. You can delete your own messages and report others. Account cleanup soft-deletes your owned room messages; closing a room does not erase its history.

Public community posts

Moments text, selected photos, author identifiers, topics and timestamps are stored in the configured service and visible to signed-in Cuepop users. Photos are uploaded to the existing public Cloudflare R2 storage; anyone with the URL can access them. Do not post sensitive information. Pending publication details are stored on this device under your account to check uncertain uploads without creating duplicate posts. You may delete your posts and report or block other authors. Account cleanup soft-deletes your posts. The current storage interface cannot delete uploaded image files, including unused uploads.